Re: HELP - cannot install updates on user's computers



Thanks again for the help. Most PC's are running McAfee AV 8.0i, a few have
the McAfee Firewall. Disabling doesn't change anything. ePolicy Orchestrator
is not in use. A couple laptops have the Windows Firewall turned on, but
most do not.

It would seem the lack of a Windows Update choice in IR Tools menu, and the
message that says the network admin has blocked this, would tend to indicate
a server policy-related issue. In any case, I'm going to check out what you
suggest.

KB

"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:uV9yOgM3GHA.4748@xxxxxxxxxxxxxxxxxxxxxxx
In news:ehFQCUM3GHA.1060@xxxxxxxxxxxxxxxxxxxx,
KB <kb@xxxxxxxxxxxxxx> typed:
Perhaps I am not asking the correct question:

In SBS 2003, inital OEM release; where is the setting that causes
every user on the network you be blocked from initiating their own
Windows Updates from IE via Microsoft?

By default, this is not blocked at all.

However, if you want to take a look in group policy, the section you'd be
looking for is Computer Config\Admin Templates\Windows Components\Windows
Update.

You might look at the GP wizards - Modeling, and Results, in GPMC.

However, I suspect the problem isn't in there - as you would know if you'd
monkeyed around with group policy. What software firewall/security
software are you running on these desktops?




Thanks,
KB
"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:OWNh3OM3GHA.3508@xxxxxxxxxxxxxxxxxxxxxxx
In news:e5dY7$L3GHA.2096@xxxxxxxxxxxxxxxxxxxx,
KB <kb@xxxxxxxxxxxxxx> typed:
Thanks for the resonse! I am trying to perform a Windows XP update
via the MS website. First, the "Windows Update" choice does not
appear in the Tools menu.

In IE, right?

2nd, if I try to go to Windows Update via
the URL, it says:
[Error number: 0x8DDD0003]
Network policy settings prevent you from using this website
to get updates for your computer.

If you believe you have received this message in error, please
contact your system administrator.
Read more about steps you can take to resolve this problem
(error number 0x8DDD0003) yourself.


The same thing happens if I try to go to Office Update and download
the latest update.

What I desire to do is temporarily relax the installation/update ban
on PC's here. I have several I would like to personally update,
watching how the update goes, and personally checking to confirm it
went ok.
Thanks again!
KB

Are you using ISA?
Do you have a SUS/WSUS box somewhere on your network?

<snip>





.



Relevant Pages

  • Re: Network Services/NT Authority
    ... gpedit.msc to access and edit local Group Policy in XP Pro. ... just looking at the firewall settings and not Group Policy firewall ... accounts on your computer via the network which can occur if you are ... for local keyboard interactive logon. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Windows Update v5 and XPSP2RC2
    ... Windows Update v5 and XPSP2RC2 ... You don't even need Group Policy (not that I'm not a huge proponent of GP ... > SP2 firewall settings. ... >> communication is a confidential and proprietary business ...
    (Focus-Microsoft)
  • Re: Access Denied
    ... In the Group Policy snap-in, ... Select "Windows Update" ... > Network policy settings prevent you from using Windows Update to download> and install updates on your computer. ... > If you believe you have received this message in error, please check with> your system administrator. ...
    (microsoft.public.windowsupdate)
  • Re: Lock users out of Network browsing
    ... This is one of the limitations of Group Policy. ... remove the Windows Update icon from the Start Menu but I cannot stop a ... user from navigating to the Windows Update site. ... Under computer>systems>network you can hide the My Network ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Domain group policy
    ... i've already activated this item in group policy. ... Some workstation of DocuWork (network scanning program) got error sometimes ... i find the xp firewall is activated in XP network property. ... The server is Windows 2003 server w/ less than 100 workstations. ...
    (microsoft.public.win2000.group_policy)

Quantcast